The hosts file is indeed mapped into sailfish-browser’s jail. Just type file:///etc/hosts into the address bar and its contents will show up. What’s missing is the corresponding nsswitch.conf. If you add that to Internet.permission, the hosts file should be back to work.
Also missing is /etc/resolv.conf. Hence the local connman proxy is used instead of a blocking DNS server unless configured inside connman.